Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/07/2026, 11:01
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
General
- Target 2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
- Size 30.9MB
- Sample260730-m4n2razvay
- SHA256 f408656c73cbbdb47b79330e21544d5a25986d300e77f0317bf327e2ac00f932
- MD5 f93e8cdfc610c0df8d78baa3e6af5922
- SHA1 2deebc61cb119cc0338879f2d8a2a7a9f602d5d1
- SHA512 4e3637eb04e7eb788f09af8e2d95dc8c05da796b1df6f183e31a1faccdd5f263aa275245a791608a0ec70c257f8a7329332801e00c1f2ab73847a35934cfc076
- SSDEEP 196608:Q9Ml6vYQ8VvPeb1UBDglPC0Y/OnFt7yO7uq5EvKq07kUM:QB8VvPeb1ADOC0Y/OnFt7yOBE+7kUM
- TLSH T1A76796215B4D8745D126BD3CD0874A01D3F5BF88C32E8F1F9BE08CE9669B6427A1EA4D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3436 2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe 3436 2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3436 2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3436 2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-30_f93e8cdfc610c0df8d78baa3e6af5922_akira_blankgrabber_cobalt-strike_coinminer_glassworm_ice.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:3436
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\loader.log
- Size 120B
- SHA256 84d2604cf4574ce7c51d9bcf0b2418433d309a4c71333bef76ce143bd39ad135
- MD5 3d3785ae10ba2a613e7ac1c286514061
- SHA1 dcd7284f8a25dac147402786f62a2fe56c1deaec
- SHA512 8dbba532f766b7eda34a3ceabf7c4087dffb1d5f843634f1b42b55696c897cbc51015cba4270d6f0ebc87872b8a090d4d4ca02ba324cf58507f514be673adafa
- TLSH T1CDB012B8E44666FC32733120D080F6B42F30150EE1623C3893CF361A6466BAF2367082
- MD5 SHA1 SHA512 TLSH